Privacy, in
plain language.

1. Who is responsible?

For current website privacy questions or requests, use hello@pencyl.io. This is a pre-launch notice for the website and interest form, not a claim that all programme services are already operating.

2. What this website collects.

The website does not currently collect course attendance, student performance records, Penny conversations or code repositories. Do not upload homework, credentials or private student records through the interest form.

3. Purpose and permission.

The form asks an adult to agree to being contacted about Season 1. That permission is used to handle the enquiry and relevant launch communication, not unrelated marketing. You may withdraw it by contacting us. The current preview stores requests but has no automated email delivery. Essential technical processing needed to deliver and protect the website is separate from optional enquiry communication; the applicable legal basis and operator details must be confirmed for the production service.

4. Students and parent involvement.

This interest form asks under-18 students to have a parent or guardian submit the enquiry. The checkbox is a declaration, not identity or parental-authority verification. No student accounts are created here. Before children use the programme, Penny or reporting services, the appropriate age, parent/guardian permissions and notices must be established for the countries and services involved.

5. Storage, access and retention.

The current application writes enquiries to a server-side file that is not available through the public website. Access is intended for the people responsible for handling enquiries and administering the service. Enquiry information should be kept only while it is needed to handle the request and relevant Season 1 communication, or where a lawful obligation requires retention. The production retention schedule and hosting/service-provider details have not yet been finalised.

There is no automated deletion schedule yet. Contact us to request withdrawal, correction or deletion; a responsible operator must review and action the request. Do not submit sensitive information. No internet service can guarantee absolute security.

6. Browser storage and outside services.

The site uses a session-storage flag to remember whether the notebook opening animation has played. It is not an advertising identifier. The site sets no advertising cookies.

A banner asks whether you allow privacy-friendly analytics. Your choice is kept in your browser’s local storage. Only if you choose “Allow”, page views are counted with GoatCounter, which does not use cookies or build personal profiles; it receives the page address, referrer, browser type, screen size and country derived from your IP address. You can change your choice at any time with “Cookie settings” in the footer.

To block automated spam, the interest form includes a hidden field that people do not see, and the server limits how many requests one connection can send in a short time. The network address used for this limit is held in memory only briefly and is not stored with your enquiry.

Fonts are requested from Google Fonts. Those requests disclose technical connection information, such as your IP address and browser request metadata, to Google. See Google’s Privacy Policy. The hosting provider may also process connection or security information under its own arrangements; the production provider has not yet been specified.

7. Programme services and international activity.

Penny, weekly parent notifications, monthly learning reports, the leaderboard and India–Germany project collaboration are planned programme services. They are not operating through this website. Before they process student data, participants must be told what is collected, the purpose, access permissions, recipients, AI providers, retention arrangements and any international data-transfer safeguards that apply. Joining the waitlist is not blanket permission to publish a child’s identity, share their work internationally or use it to train AI.

8. Your choices and requests.

You may ask about the information held about you, request correction or deletion, and withdraw your permission for enquiry-related contact. Depending on the law that applies, you may also have rights to access a copy, restrict or object to processing, obtain portability or complain to a competent data-protection authority. We may need proportionate information to confirm that a request relates to you; do not send identity documents unless specifically requested through an appropriate process.

9. Changes and contact.

The date at the top identifies this version. This notice must be updated as the operator and production services are confirmed. Materially different uses of student data need clear information and any required permission before they begin. Contact hello@pencyl.io about privacy questions.